Noos
PT EN
RAN-AZ900-00192
Ranvier · AZ900

Exam AZ900 Topics: architecture Difficulty: medium

A game studio's deployment team must be able to create and manage all of the Azure resources in the studio's "game-builds" resource group. The studio's security policy adds one restriction: the team must not be able to grant other people access to those resources. Which built-in role should the team be assigned at the resource group scope?

Options (Reading Mode) Click to filter discussion →
  1. A. The Reader role, which grants access to view resources without allowing any changes
  2. B. The Owner role, which grants full access to everything in the assigned scope
  3. C. The User Access Administrator role, which lets the team manage user access to Azure resources
  4. D. The Contributor role, which grants full access to manage all resources
Reveal answer

Correct answer: The Contributor role, which grants full access to manage all resources

Reference: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (D): The Contributor role, which grants full access to manage all resources

Ranvier · AZ900

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.